Cisco 11500 Content Services Switch Malformed SSL Client Certificate Denial of Service Vulnerability

Bugtraq ID:	15144
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Oct 19 2005 12:00AM
Updated:	Oct 19 2005 12:00AM
Credit:	Announced by the vendor.
Vulnerable:	Cisco CSS11500 Content Services Switch 7.30 (00.09)S Cisco CSS11500 Content Services Switch 7.30 (00.08)S Cisco CSS11500 Content Services Switch 7.20 (03.10)S Cisco CSS11500 Content Services Switch 7.20 (03.09)S Cisco CSS11500 Content Services Switch 7.10 (05.07)S Cisco CSS11500 Content Services Switch 7.5 Cisco CSS11500 Content Services Switch 7.4
Not Vulnerable:

Cisco 11500 Content Services Switch Malformed SSL Client Certificate Denial of Service Vulnerability

Cisco 11500 Content Services Switch is prone to a denial of service condition when processing malformed SSL client certificates.

Cisco 11500 Content Services Switch running WebNS operating system versions 7.1 through 7.5 are vulnerable to this issue.

Cisco 11500 Content Services Switch Malformed SSL Client Certificate Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cisco 11500 Content Services Switch Malformed SSL Client Certificate Denial of Service Vulnerability

Solution:
Cisco has released an advisory to address this issue. Please see the referenced advisory for information on obtaining fixes.

Cisco 11500 Content Services Switch Malformed SSL Client Certificate Denial of Service Vulnerability

References:

• Cisco Security Advisory: Cisco 11500 Content Services Switch SSL Malformed Clien (Cisco)
  
• CSS 11500 Series Content Services Switches Product Page (Cisco)